Locked Shields 2014 After Action Report: Executive Summary

Authors:

Files:

Locked Shields is a real-time network defence exercise which in 2014 involved close to 300 participants from 17 nations. Running over two days the 12 defending teams from all over Europe were put against one attacking team for a unique training and cooperation opportunity.

This year’s scenario placed the teams in a fictional country of Berylia which industry fell under increasing cyber attacks. Day 1 started with low level hacktivist campaigns and led to espionage and sabotage attacks against the defenders’ networks by the end of day 2. In addition to technical defence the event includes a number of additional tasks such as legal assignments and forensics challenge which aim to make the exercise as lifelike as possible. The exercise is built up as a competitive game in which the defending teams are scored based on their performance. Although the defending teams are competing with each other, the exercise is set up in a way that it encourages the teams to share information and cooperate as much as possible.